Commit 1f696097 authored Oct 04, 2016 by Alec Ari Committed by Herbert Xu Oct 21, 2016

crypto: api - Fix Kconfig dependencies for FIPS



Currently FIPS depends on MODULE_SIG, even if MODULES is disabled.
This change allows the enabling of FIPS without support for modules.

If module loading support is enabled, only then does
FIPS require MODULE_SIG.

Signed-off-by: Alec Ari <neotheuser@gmail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

parent d52db518

crypto/Kconfig

+1 −1

Original line number	Diff line number	Diff line
		@@ -24,7 +24,7 @@ comment "Crypto core or helper"
		config CRYPTO_FIPS
		bool "FIPS 200 compliance"
		depends on (CRYPTO_ANSI_CPRNG \|\| CRYPTO_DRBG) && !CRYPTO_MANAGER_DISABLE_TESTS
		depends on MODULE_SIG
		depends on (MODULE_SIG \|\| !MODULES)
		help
		This options enables the fips boot option which is
		required if you want to system to operate in a FIPS 200

Admin message